Information disclosure

The CNNMoney Portfolio for stocks aka com.cnn.portfolio application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6883

The CNNMoney Portfolio for stocks aka com.cnn.portfolio application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6883: Undefined Security Weakness

The CNNMoney Portfolio for stocks aka com.cnn.portfolio application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The CNNMoney Portfolio aka com.cnn.cnnmoney application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6854

Name of the Vulnerable Software and Affected Versions The CNNMoney Portfolio aka com.cnn.cnnmoney application version 1.03 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-5869: Undefined Security Weakness

The CNNMoney Portfolio aka com.cnn.cnnmoney application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...